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HTTP Cookies: Standards , privacy , and politics 
David M. Kristol 

Novenaber 2001 ACM Transactions on Internet Technology (TOIT), volume i issue 2 
Publisher: ACM Press 

Full text available- pdf(390 38 KB)^ Additional Information: full citation , abstract , references , citings , index 

How did we get from a world where cookies were something you ate and where 
"nontechies" were unaware of "Netscape cookies" to a world where cookies are a hot- 
button privacy issue for many computer users? This article describes how HTTP "cookies" 
work and how Netscape's original specification evolved into an IETF Proposed Standard. I 
also offer a personal perspective on how what began as a straightforward technical 
specification turned into a political flashpoint when it tried to address nontechn ... 

Keywords: Cookies, HTTP, World Wide Web, privacy, state management 
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. Full text available: ffl Ddf(96.24 KB) ^ * u * * . - ^ . 

g ht^l^26 84 KB) Information: full citation , abstract , references , index terms 

Collecting consumer viewing habits will come back to bite advertisers who do not 
understand or appreciate how consumers feel about privacy infringement. 

* Virtual exte nsion: Do privacy seals in e-commerce really work? 
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October 2006 Proceedings of the ACM workshop on Digital rights management DRM 
'06 

Publisher: ACM Press 

Full text available: 'Q pdf(231.24 KB) Additional Information: full citati on , a bstract , references , index terms 

In high-tech businesses ranging from Internet service providers to e-commerce websites 
and music stores like Apple iTun-es, there is considerable potential for collecting personal 
Information about customers, monitoring their usage habits, or even exerting control over 
their behavior - for example, restricting what can be done with a purchased song. A 
privacy ceiling is an effective limit to these privacy intrusions, created by the perceived or 
actual legal liability of possessing too much infer ... 

Keywords: digital rights management, privacy 



Security II: N eg lect of information privacy instruction: a case of educational 
malpractice? 

Victoria W. Romney, Gordon W. Romney 

October 2004 Proceedings of the 5th conference on Information technology education 
CITC5 '04 

Publisher: ACM Press 

Full text available: "gj pdfd 28.22 KB ) Additional Information: full citat ion, abstract , references , index terms 

Not only should InformationTechnology (IT) Educators be knowledgeable regarding data 
privacy legislation but they should be teaching correct system and database design 
principles to IT students in order to ensure future application design compliance with 
international legislative trends. Perhaps the most contentious and serious issue facing IT 
practitioners in the world today is data privacy. Data Privacy impacts every aspect of IT 
from database and application design to privacy and use polic ... 

Keywords: European union directive, Gramm-Leach-Bliley, HIPAA, IT education, data 
privacy, database design, legal issues, legislation 
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Full text available- ITl pdf( 117 67 KB) Additional Information: full citation , abstract, references , citing s. Index 

terms 

Ecommerce personalization can help web sites build and retain relationships with 
customers, but it also raises a number of privacy concerns. This paper outlines the 
privacy risks associated with personalization and describes a number of approaches to 
personalization system design that can reduce these risks. This paper also provides an 
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overview of the fair information practice principles and discusses how they may be applied 
to the design of personalization systems, and introduces privacy laws a ... 
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I u. Alt ^(,A^i- iyn\ Additional Information: full citation , abstract , references , citings. Index 

Full text available: TO pdf(416.68 KB) ^ T ' 

temns . review 

We set out to examine whether current, DRM-based online offerings of music and movies 
accord with consumers' current expectations regarding the personal use of copyrighted 
works by studying the behavior of six music, and two film online distribution services. We 
find that, for the most part, the services examined do not accord with expectations of . 
personal use. The DRM-based services studied restrict personal use in a manner 
inconsistent with the norms and expectations governing the purchase and ... 

Keywords: access control, content distribution, copyright, digital rights management, fair 
use, personal use, privacy 
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10 Ethics and information systems: Resolvin g the quandaries I 
^ H. Jeff Smith 

^ August 2002 ACM SIGMIS Database, volume 33 issue 3 
Publisher: ACM Press 

Full text available: g] pdf(641.10 KB) Additional Information: full citation , abstract , references , index temns 

The information systems (I/S) community is becoming concerned with questions of ethical 
behavior in many realms. But those who attempt to resolve the quandaries may find 
themselves confused by differing approaches and theoretical assumptions that are often 
proffered. This paper provides a meta-framework that identifies the areas of convergence 
and divergence in these approaches and assumptions. An illustrative example (America 
Online's plans to share subscriber information with telemarketers) is ... 

Keywords: computers and society, ethics 
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^ Wenhong Luo, Mohammad Najdawi 
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Health Web sites are employ a medley of trust-building approaches. But does a definitive 
formula exist for vyinning consumer trust? 

12 SIG GRAPH public policy committee activity detailed | 
^ David Nelson, Bob Ellis, Laurie Reinhart 

>^ February 2001 ACM SIGGRAPH Computer Graphics, volume 35 issue i 
Publisher: ACM Press 

Full text available: ^pdf (1.15 MB) Additional Information: full citation , abstract , index terms 

We Start this column with the results of our third on-line opinion survey on public policy 
issues affecting computer graphics. Next we provide an introduction to and a copy of the 
definition paper for a prospective study of computer graphics research to be conducted by 
the National Research Council with partial funding from SIGGRAPH. This is followed by an 
update on our activities in proposing a course on public policy and a panel on digital rights 
management of intellectual property for SIGGRAP ... 

13 Inf ormation technolo g y and dataveillance 
Roger Clarke 

May 1988 Communications of the ACM, volume 3i issue 5 
Publisher: ACM Press 

Full text available* fill pdf(1 89 MB) Additional Information: full citation , abstr act, references , citings , index 

* terms , review 

Data surveillance is now supplanting conventional surveillance techniques. With this trend 
come new monitoring methods such as personal dataveillance and mass dataveillance 
that require more effective safeguards and a formal policy framework. 

1^ Consumer privacy concerns about Internet marketing 
Huaiqlng Wang, Matthew K, O. Lee, Chen Wang 
March 1998 Communications of the ACI^, volume 4i issue 3 
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Gregory Conti, Edward Sobiesk 

July 2007 Proceedings of the 3rd symposium on Usable privacy and security SOUPS 
•07 

Publisher: ACM Press 

Full text available: ^pdf( 115.58 KB ) Additional Information: full citation , abstract , references , index terms 

In today's era of the global ubiquitous use of free online tools and business nnodels that 
depend on data retention and customized advertising, we face a growing tension between 
the privacy concerns of individuals and the financial motivations of organizations. As a 
critical foundation step to address this problem, we must first understand the attitudes, 
beliefs, behaviors, and expectations of web users In order to create an environment where 
user privacy needs are met while still allowing onl ... 

Keywords: AOL, Google, MSN, Yahool, anonymity, anonymlzation, data retention, 
fingerprinting, googling, information disclosure, privacy, usable security, web search 



18 Consumer perceptions of privacy, security and trust in ubiquitous commerce 
George Roussos, Theano Moussouri 

November 2004 Personal and Ubiquitous Computing, volume 8 issue 6 
Publisher: Sprlnger-Verlag 

Full text available: pdf(378>27 KB) Additional Information: full citation , abstract , citings , index temns 

Commerce is a rapidly emerging application area of ubiquitous computing. In this paper, 
we discuss the market forces that make the deployment of ubiquitous commerce 
infrastructures a priority for grocery retailing. We then proceed to report on a study on 
consumer perceptions of MyGrocer, a recently developed ubiquitous commerce system. 
The emphasis of the discussion is on aspects of security, privacy protection and the 
development of trust; we report on the findings of this study. We adopt th ... 

Rule of law and the international diffusion of e-commerce 
Chuan-Fong Shih, Jason Dedrick, Kenneth L. Kraemer 
November 2005 Communications of the ACM, volume 48 issue ii 

Publisher: ACM Press 

Full text available: ^ mm2^) Additional Information: full citation , abstract , references , index terms 
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